Skip to main content
All CollectionsMonitoringTests
Test 290: AWS Database Writes I/O Monitored
Test 290: AWS Database Writes I/O Monitored

Drata validates that AWS database clusters and database instances have a CloudWatch metric alarm for writes I/O for each cluster or instance

Updated over 2 months ago

ASSOCIATED DRATA CONTROL

This test is part of the System Monitoring control (DCF-86) that ensures production systems and resources are monitored and automated alerts are sent out personnel based on pre-configured rules. Events are triaged to determine if they constitute an incident and escalated per policy if necessary.

WHAT TO DO IF A TEST FAILS

If Drata finds that one or more AWS database clusters or instances do not have a CloudWatch metric alarm for writes I/O configured with a subscription to an SNS topic, the test will fail.

STEPS TO REMEDIATE

  1. Sign in to CloudWatch console.

  2. Create an alarm by selecting 'Alarm' then 'Create alarm' from the navigation panel.

  3. Click 'select metric' > 'RDS' > 'Per-Cluster Metrics' and select your DB cluster or instance identifier then select 'WriteIOPS' metric.

  4. Specify conditions by setting threshold type, defining threshold value, setting the period, and setting the evaluation periods.

  5. Choose an existing SNS topic or create a new one to subscribe to.

  6. Give your alarm a name, review your settings, and finish creating the alarm.

  7. Repeat for each failing DB instance or cluster

Did this answer your question?